Huawei Data Communication: RCE Vulnerabilities in Some Microsoft Windows Systems (huawei-sa-20190819-01-windows)

Microsoft released a security advisory to disclose four remote code execution RCE vulnerabilities in Remote Desktop Services. This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced...

The vulnerability of the `clear_decompress_subcode_rlex` function in the FreeRDP remote desktop protocol allows a intruder to trigger a service failure.

The vulnerability of the cleardecompresssubcoderlex function in the FreeRDP remote desktop protocol is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the rfx_process_message_tileset function in the implementation of the remote desktop protocol FreeRDP allows a intruder to cause a service failure.

The vulnerability of the rfxprocessmessagetileset function in the implementation of the remote desktop protocol FreeRDP is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the FreeRDP remote desktop protocol, caused by a full integer overflow, allows an attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the FreeRDP remote desktop protocol is caused by a numerical overflow condition. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

freerdp, libwinpr security update

CentOS Errata and Security Advisory CESA-2020:2334 An update for freerdp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

FreeRDP Input Validation Error Vulnerability (CNVD-2020-31432)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. An input validation error vulnerability exists in the USB redirection channel in FreeRDP 2.0.0 and prior versions. An attacker can exploit this vulnerability to read or write arbitrary memory...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31434)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in cleardecompresssubcoderlex in FreeRDP 2.0.0 and prior versions. The vulnerability stems from a network system or product performing operations in memory...

FreeRDP Input Validation Error Vulnerability (CNVD-2020-31431)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A security vulnerability exists in FreeRDP 2.0.0 and earlier versions. An attacker could exploit the vulnerability to allow the server to manipulate the client in order to write out data bound to a...

FreeRDP Resource Management Error Vulnerability (CNVD-2020-31428)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A resource management error vulnerability exists in cliprdrserverreceivecapabilities in FreeRDP 2.0.0 and earlier versions. An attacker can exploit the vulnerability with the help of specially craft...

RHEL 8 : freerdp (RHSA-2020:2336)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2336 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to R...

DEBIAN-CVE-2020-11086

In FreeRDP less than or equal to 2.0.0, there is an out-of-bound read in ntlmreadntlmv2clientchallenge that reads up to 28 bytes out-of-bound to an internal structure. This has been fixed in 2.1.0...

UBUNTU-CVE-2020-11043

In FreeRDP less than or equal to 2.0.0, there is an out-of-bounds read in rfxprocessmessagetileset. Invalid data fed to RFX decoder results in garbage on screen as colors. This has been patched in 2.1.0...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

freerdp: Integer overflow in region.c

A flaw was found in FreeRDP in versions between 1.0 and 2.0.0. An integer overflow was found in the region.c function which could allow an attacker the ability to control the RDP server as well as the data sent to the client. The highest threat from this vulnerability is to data confidentiality a...

freerdp: Out-of-bounds write in interleaved.c

A flaw was found in FreeRDP between versions 1.0 and 2.0.0. An out-of-bounds memory write was found in the interleaved.c function which could allow an attacker to take over and control the RDP server, including data sent to the client. The highest threat from this vulnerability is to data...

freerdp: Integer overflow in region.c

A flaw was found in FreeRDP in versions between 1.0 and 2.0.0. An integer overflow was found in the region.c function which could allow an attacker the ability to control the RDP server as well as the data sent to the client. The highest threat from this vulnerability is to data confidentiality a...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

freerdp: Out-of-bounds write in interleaved.c

A flaw was found in FreeRDP between versions 1.0 and 2.0.0. An out-of-bounds memory write was found in the interleaved.c function which could allow an attacker to take over and control the RDP server, including data sent to the client. The highest threat from this vulnerability is to data...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...